fortigate-ipsec-40-mr3

Redundant route-based VPN configuration example Redundant VPN configurations
To define the phase 2 configurations for the four VPNs
1 Go to VPN > IPsec > Auto Key (IKE).
2 Select Create Phase 2, enter the following information and select OK:
Name
Phase 1
Route_A.
Site_1_A
3 Select Create Phase 2, enter the following information and select OK:
Name
Phase 1
Route_B.
Site_1_B
4 Select Create Phase 2, enter the following information and select OK:
Name
Phase 1
Route_C.
Site_1_C
5 Select Create Phase 2, enter the following information and select OK:
Name
Phase 1
Route_D.
Site_1_D
To configure routes
1 Go to Router > Static > Static Route.
2 Select Create New, enter the following default gateway information and then select
OK:
Destination IP/Mask 0.0.0.0/0.0.0.0
Device WAN1
Gateway 192.168.10.1
Distance 10
3 Select Create New, enter the following information and then select OK:
Destination IP/Mask 10.31.101.0/255.255.255.0
Device Site_1_A
Distance 1
4 Select Create New, enter the following information and then select OK:
Destination IP/Mask 10.31.101.0/255.255.255.0
Device Site_1_B
Distance 2
IPsec VPNs for FortiOS 4.0 MR3
158 01-434-112804-20120111
http://docs.fortinet.com/